Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/FpZaAdVzmHEJAFoVXQ6oTfZ-MJw.roa
File: FpZaAdVzmHEJAFoVXQ6oTfZ-MJw.roa (raw, json)
Hash identifier: FN+GucJkB84n2LLES8rKx6wGIoDBApXrUAiXCktToMU=
Subject key identifier: 16:96:5A:01:D5:73:98:71:09:00:5A:15:5D:0E:A8:4D:F6:7E:30:9C
Certificate issuer: /CN=9f740b2d865dd989fc4b556854712cb1efc5f3d2
Certificate serial: 0126F476
Authority key identifier: 9F:74:0B:2D:86:5D:D9:89:FC:4B:55:68:54:71:2C:B1:EF:C5:F3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3QLLYZd2Yn8S1VoVHEsse_F89I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/FpZaAdVzmHEJAFoVXQ6oTfZ-MJw.roa
Signing time: Sat 01 Jan 2022 02:56:15 +0000
ROA not before: Sat 01 Jan 2022 02:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 91.224.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19330166 (0x126f476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f740b2d865dd989fc4b556854712cb1efc5f3d2
Validity
Not Before: Jan 1 02:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16965a01d573987109005a155d0ea84df67e309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:9a:a2:90:de:67:97:b2:f8:73:78:4c:69:
c0:e1:18:a7:d9:f2:58:d1:4c:aa:b1:a5:4f:ce:ba:
7a:2a:37:57:1b:98:d0:b1:ed:fc:cf:83:87:82:65:
cb:5f:f0:5f:b7:dc:59:bd:b0:69:4e:29:7d:44:0b:
2f:bf:30:1f:50:c9:e0:ed:00:ef:42:5b:1b:dc:e8:
a0:83:f9:41:0a:74:21:fe:8a:70:cb:0b:af:29:d6:
54:cd:7a:51:c1:82:90:8f:3d:f2:1a:21:56:c2:a6:
80:d2:5b:4c:79:f1:cd:26:c9:d7:9c:9a:e5:c2:11:
5c:b5:1c:4a:47:85:5b:b1:33:04:5c:4e:66:27:df:
b0:92:e0:46:6c:7d:31:64:f6:fc:c8:32:f4:d3:cc:
ed:e0:ad:7e:51:93:52:c2:2d:ef:5c:52:0e:1c:c4:
9a:80:37:a0:a6:e1:7d:07:7f:db:d1:a6:6c:6b:e2:
c0:83:60:b0:3c:7b:d5:ef:b8:f1:08:0b:0c:0a:f9:
b7:9b:78:6e:a6:b8:b0:e0:38:30:d2:48:ca:63:e9:
57:24:07:f6:b1:c4:ea:cd:cc:86:28:9f:da:0f:dc:
4e:1d:7f:18:2d:cc:e9:2a:39:a8:df:f3:04:78:af:
2d:4c:e8:4c:b2:fa:53:af:92:0a:a9:e9:31:ea:61:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:5A:01:D5:73:98:71:09:00:5A:15:5D:0E:A8:4D:F6:7E:30:9C
X509v3 Authority Key Identifier:
keyid:9F:74:0B:2D:86:5D:D9:89:FC:4B:55:68:54:71:2C:B1:EF:C5:F3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3QLLYZd2Yn8S1VoVHEsse_F89I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/FpZaAdVzmHEJAFoVXQ6oTfZ-MJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/n3QLLYZd2Yn8S1VoVHEsse_F89I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8d:d3:b2:d5:22:85:2c:60:92:9b:75:1f:f0:45:b0:e2:52:
90:60:9a:f1:3d:c3:54:2f:49:ae:3d:a0:d0:75:b5:6f:4e:72:
ab:df:32:8f:63:35:61:33:cd:a8:05:92:53:a1:a8:84:ff:36:
63:be:f2:a1:80:4e:a8:1e:0e:7c:84:ac:1e:8c:d5:dd:3c:4d:
37:62:03:e6:fe:85:77:b8:38:36:bd:fd:cf:6f:70:5a:15:32:
21:33:2f:c0:8b:2a:66:b9:4c:bb:18:dc:d4:2a:06:13:66:13:
84:2a:fe:d4:5b:e7:29:f1:8f:8d:22:a1:8a:76:69:de:16:89:
a6:b0:94:18:a5:46:d7:33:ab:98:a3:c0:8a:29:d5:60:1c:05:
c4:64:04:c9:d4:b0:4f:aa:15:ef:9b:eb:3f:1c:82:e6:97:89:
3c:61:c6:12:9e:53:2e:e2:53:50:bc:15:5c:d3:58:ac:e7:b2:
b7:78:58:97:a8:f3:bc:b1:22:0e:d5:d1:31:ac:b9:ea:e0:2b:
57:bb:ef:f2:87:a2:72:8c:49:18:dc:c5:9a:0a:a6:d0:23:fc:
b0:9b:f1:e3:1e:76:54:7b:67:75:65:62:09:42:f6:06:6b:23:
05:d8:3e:84:c2:fc:5c:98:22:1c:db:c3:77:03:97:77:c8:03:
86:d1:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:08 2025 by rpki-client